GitHub Advisoryadvisory · Packagist

GHSA-w29j-8phw-ffjf Moodle has a time restriction bypass

MEDIUM Published 2025-10-23 Modified 2025-10-24 Official page ↗
Aliases
CVE-2025-62401
Ecosystem
Packagist
Packages
moodle/moodle
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
Weaknesses
CWE-285
Reviewed
2025-10-24

Affected packages

• Packagist moodle/moodle: >= 5.0.0-beta, < 5.0.3 → fixed in 5.0.3 • Packagist moodle/moodle: >= 4.5.0-beta, < 4.5.7 → fixed in 4.5.7 • Packagist moodle/moodle: >= 4.2.0-beta, < 4.4.11 → fixed in 4.4.11 • Packagist moodle/moodle: < 4.1.21 → fixed in 4.1.21

Description

An issue in Moodle's timed assignment feature allowed students to bypass the time restriction, potentially giving them more time than allowed to complete an assessment.

Related

Alias · CVE (1)

  • CVE-2025-62401 An issue in Moodle’s timed assignment feature allowed students to bypass the time restriction, potentially giving them more time than… vulnerability

Weakness · CWE (1)

  • CWE-285 Improper Authorization weakness

References